http://www.secuobs.com L'observatoire de la securite Internet fr webmaster@secuobs.com Post Exploitation Shellbag `ing http://www.secuobs.com/revue/news/332099.shtml http://www.secuobs.com/news/comments616092006-wishmaster.shtml#11065 http://www.secuobs.com/news/comments616092006-wishmaster.shtml#11065 simple-shellcode-generator.py http://www.secuobs.com/revue/news/330577.shtml http://www.secuobs.com/news/comments616092006-wishmaster.shtml#10970 http://www.secuobs.com/news/comments616092006-wishmaster.shtml#10970 ESRT @xsploitedsec - Learning Assembly Through Writing Shellcode http://www.secuobs.com/twitter/news/247367.shtml http://www.secuobs.com/news/comments616092006-wishmaster.shtml#10852 http://www.secuobs.com/news/comments616092006-wishmaster.shtml#10852 ESRT @ChrisJohnRiley - Suggested Reading DEP Enforcing Shellcode http://www.secuobs.com/twitter/news/246514.shtml http://www.secuobs.com/news/comments616092006-wishmaster.shtml#10814 http://www.secuobs.com/news/comments616092006-wishmaster.shtml#10814 ESRT @BorjaMerino @radareorg: Nice talk on analyzing shellcodes with r2 - by @vext01 http://www.secuobs.com/twitter/news/245023.shtml http://www.secuobs.com/news/comments616092006-wishmaster.shtml#10753 http://www.secuobs.com/news/comments616092006-wishmaster.shtml#10753 ESRT @packet_storm - Simple x64 XOR Shellcode Obfuscation http://www.secuobs.com/twitter/news/244652.shtml http://www.secuobs.com/news/comments616092006-wishmaster.shtml#10725 http://www.secuobs.com/news/comments616092006-wishmaster.shtml#10725 ESRT @hacktalkblog - New Exploit papers - Simple x64 XOR Shellcode Encoder Loader http://www.secuobs.com/twitter/news/242541.shtml http://www.secuobs.com/news/comments616092006-wishmaster.shtml#10682 http://www.secuobs.com/news/comments616092006-wishmaster.shtml#10682 ESRT @MarioVilas @berendjanwever - Updated Windows calcexe shellcode: smaller and with x64 support http://www.secuobs.com/twitter/news/240439.shtml http://www.secuobs.com/news/comments516092006-wishmaster.shtml#10600 http://www.secuobs.com/news/comments516092006-wishmaster.shtml#10600 ESRT @xanda @EdiStrosar: All cool kids pop programmer's calc.exe in their shellcode - from @mattifestation http://www.secuobs.com/twitter/news/229729.shtml http://www.secuobs.com/news/comments516092006-wishmaster.shtml#10223 http://www.secuobs.com/news/comments516092006-wishmaster.shtml#10223 ESRT @MarioVilas - Nice trick to write x86/x64 hybrid shellcodes http://www.secuobs.com/twitter/news/227678.shtml http://www.secuobs.com/news/comments516092006-wishmaster.shtml#10154 http://www.secuobs.com/news/comments516092006-wishmaster.shtml#10154 ESRT @sbrabez - A collection of shellcodes for BSD and Linux for exploit development http://www.secuobs.com/twitter/news/227277.shtml http://www.secuobs.com/news/comments516092006-wishmaster.shtml#10145 http://www.secuobs.com/news/comments516092006-wishmaster.shtml#10145 Windows x64 Shellcode http://www.secuobs.com/revue/news/316471.shtml http://www.secuobs.com/news/comments516092006-wishmaster.shtml#10117 http://www.secuobs.com/news/comments516092006-wishmaster.shtml#10117 ESRT @xanda @_clem1 - I use this lame python script to retrieve exe from these DownloadExec shellcodes thx @M86Labs http://www.secuobs.com/twitter/news/226513.shtml http://www.secuobs.com/news/comments516092006-wishmaster.shtml#10112 http://www.secuobs.com/news/comments516092006-wishmaster.shtml#10112 ESRT @endrazine @GadixCRK - Shellcode Anatomy: Part I of IV http://www.secuobs.com/twitter/news/224893.shtml http://www.secuobs.com/news/comments516092006-wishmaster.shtml#10051 http://www.secuobs.com/news/comments516092006-wishmaster.shtml#10051 ESRT @adulau - shellcodeexec is a small script to execute in memory a sequence of opcodes not tested but looks very handy http://www.secuobs.com/twitter/news/224388.shtml http://www.secuobs.com/news/comments516092006-wishmaster.shtml#10043 http://www.secuobs.com/news/comments516092006-wishmaster.shtml#10043 ESRT @Ivanlef0u @xanda - The Massive 2 mb Shellcode API Hash List http://www.secuobs.com/twitter/news/223881.shtml http://www.secuobs.com/news/comments516092006-wishmaster.shtml#10028 http://www.secuobs.com/news/comments516092006-wishmaster.shtml#10028 ESRT @MarioVilas @xsploitedsec - The Shellcode Development Framework http://www.secuobs.com/twitter/news/215815.shtml http://www.secuobs.com/news/comments516092006-wishmaster.shtml#9878 http://www.secuobs.com/news/comments516092006-wishmaster.shtml#9878 High Level Windows Shellcode Development Methods http://www.secuobs.com/revue/news/300484.shtml http://www.secuobs.com/news/comments516092006-wishmaster.shtml#9456 http://www.secuobs.com/news/comments516092006-wishmaster.shtml#9456 ESRT @exploitdb - papers - Manual Shellcode http://www.secuobs.com/twitter/news/190185.shtml http://www.secuobs.com/news/comments416092006-wishmaster.shtml#9259 http://www.secuobs.com/news/comments416092006-wishmaster.shtml#9259 scdbg shellcode analysis http://www.secuobs.com/revue/news/284933.shtml http://www.secuobs.com/news/comments416092006-wishmaster.shtml#8882 http://www.secuobs.com/news/comments416092006-wishmaster.shtml#8882 ESRT @revskills @define__tosh__ - shellcode encoder http://www.secuobs.com/twitter/news/164913.shtml http://www.secuobs.com/news/comments416092006-wishmaster.shtml#8707 http://www.secuobs.com/news/comments416092006-wishmaster.shtml#8707 ESRT @emiliengirault - Win32 speaking shellcode using MS Speech API - Pwn in style http://www.secuobs.com/twitter/news/159128.shtml http://www.secuobs.com/news/comments416092006-wishmaster.shtml#8511 http://www.secuobs.com/news/comments416092006-wishmaster.shtml#8511 ESRT @xanda - Testing Your Unix-Based Shellcode on a Non-Executable Stack or Heap http://www.secuobs.com/twitter/news/149557.shtml http://www.secuobs.com/news/comments416092006-wishmaster.shtml#8276 http://www.secuobs.com/news/comments416092006-wishmaster.shtml#8276 Writing OS Independent Shellcode http://www.secuobs.com/revue/news/223347.shtml http://www.secuobs.com/news/comments416092006-wishmaster.shtml#6222 http://www.secuobs.com/news/comments416092006-wishmaster.shtml#6222 ESRT @y0ug @Ivanlef0u - Evolving Shellcode by Symantec Cool sum up of shellcode techniques on Win32 http://www.secuobs.com/twitter/news/93053.shtml http://www.secuobs.com/news/comments416092006-wishmaster.shtml#6177 http://www.secuobs.com/news/comments416092006-wishmaster.shtml#6177 Shellcode and frameworks http://www.secuobs.com/revue/news/206211.shtml http://www.secuobs.com/news/comments416092006-wishmaster.shtml#5558 http://www.secuobs.com/news/comments416092006-wishmaster.shtml#5558 JITed egg-hunter stage-0 shellcode Adjusted universal for xp vista win7 http://www.secuobs.com/revue/news/206111.shtml http://www.secuobs.com/news/comments416092006-wishmaster.shtml#5555 http://www.secuobs.com/news/comments416092006-wishmaster.shtml#5555 Yataglass - Network-level Code Emulation for Analyzing Memory-scanning Attacks http://www.secuobs.com/revue/news/204046.shtml http://www.secuobs.com/news/comments416092006-wishmaster.shtml#5480 http://www.secuobs.com/news/comments416092006-wishmaster.shtml#5480 ESRT @daveaitel - JITed egg-hunter stage-0 shellcode (Permanent DEP bypass) http://www.secuobs.com/twitter/news/75515.shtml http://www.secuobs.com/news/comments416092006-wishmaster.shtml#5470 http://www.secuobs.com/news/comments416092006-wishmaster.shtml#5470 ESRT @MarioVilas @DidierStevens - Added shellcode to Tweet to my library http://www.secuobs.com/twitter/news/72795.shtml http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5378 http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5378 JITed exec notepad shellcode http://www.secuobs.com/revue/news/199509.shtml http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5334 http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5334 JITed Stage-0 Shellcode http://www.secuobs.com/revue/news/199510.shtml http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5333 http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5333 Writing JIT-Spray Shellcode for fun and profit http://www.secuobs.com/revue/news/199471.shtml http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5331 http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5331 ESRT @xanda - Writing JIT-Spray Shellcode for fun and profit http://www.secuobs.com/twitter/news/71130.shtml http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5312 http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5312 ESRT @DidierStevens - Ping shellcode published http://www.secuobs.com/twitter/news/67344.shtml http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5160 http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5160 MemoryLoadLibrary From C Program to Shellcode http://www.secuobs.com/revue/news/192170.shtml http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5070 http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5070 Better shellcode disassembly in Pym’s http://www.secuobs.com/revue/news/192012.shtml http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5067 http://www.secuobs.com/news/comments316092006-wishmaster.shtml#5067 ESRT @sagar38 - nice use of the JPC x86 emulator - A super quick and super dirty shellcode emulator http://www.secuobs.com/twitter/news/64312.shtml http://www.secuobs.com/news/comments316092006-wishmaster.shtml#4999 http://www.secuobs.com/news/comments316092006-wishmaster.shtml#4999 Building_your_own_Shell.pdf http://www.secuobs.com/revue/news/190316.shtml http://www.secuobs.com/news/comments316092006-wishmaster.shtml#4984 http://www.secuobs.com/news/comments316092006-wishmaster.shtml#4984 Video : Hacking shellcode into static files http://www.secuobs.com/videos/news/12911.shtml http://www.secuobs.com/news/comments316092006-wishmaster.shtml#4846 http://www.secuobs.com/news/comments316092006-wishmaster.shtml#4846 Shellcode to Load a DLL From Memory http://www.secuobs.com/revue/news/186190.shtml http://www.secuobs.com/news/comments216092006-wishmaster.shtml#4726 http://www.secuobs.com/news/comments216092006-wishmaster.shtml#4726 ESRT @MarioVilas - shellcode2exe.py - Converting shellcode to executable files using InlineEgg http://www.secuobs.com/twitter/news/56860.shtml http://www.secuobs.com/news/comments216092006-wishmaster.shtml#4567 http://www.secuobs.com/news/comments216092006-wishmaster.shtml#4567 ESRT @opexxx @vierito5 @phr0nak - Shellcode Tutorials http://www.secuobs.com/twitter/news/56838.shtml http://www.secuobs.com/news/comments216092006-wishmaster.shtml#4562 http://www.secuobs.com/news/comments216092006-wishmaster.shtml#4562 ESRT @MarioVilas @matrosov - Very useful service: Shellcode to EXE http://www.secuobs.com/twitter/news/56726.shtml http://www.secuobs.com/news/comments216092006-wishmaster.shtml#4555 http://www.secuobs.com/news/comments216092006-wishmaster.shtml#4555 ESRT @packet_storm - Linux x86 Overwrite MBR With LOL Shellcode http://www.secuobs.com/twitter/news/56119.shtml http://www.secuobs.com/news/comments216092006-wishmaster.shtml#4513 http://www.secuobs.com/news/comments216092006-wishmaster.shtml#4513 ESRT @packet_storm - Linux x86 9 Bytes Kill All Processes Shellcode http://www.secuobs.com/twitter/news/55718.shtml http://www.secuobs.com/news/comments216092006-wishmaster.shtml#4494 http://www.secuobs.com/news/comments216092006-wishmaster.shtml#4494 Download and LoadLibrary shellcode released http://www.secuobs.com/revue/news/180176.shtml http://www.secuobs.com/news/comments216092006-wishmaster.shtml#4420 http://www.secuobs.com/news/comments216092006-wishmaster.shtml#4420 Testival released, loads shellcodes at a controlable location, sets registers and memory, executes http://www.secuobs.com/revue/news/180165.shtml http://www.secuobs.com/news/comments216092006-wishmaster.shtml#4419 http://www.secuobs.com/news/comments216092006-wishmaster.shtml#4419 ALPHA3 - Alphanumeric shellcode encoder http://www.secuobs.com/revue/news/179989.shtml http://www.secuobs.com/news/comments216092006-wishmaster.shtml#4410 http://www.secuobs.com/news/comments216092006-wishmaster.shtml#4410 ESRT @QuestOnSecurity Whitepaper about shellcode that looks like english text http://www.secuobs.com/twitter/news/40850.shtml http://www.secuobs.com/news/comments216092006-wishmaster.shtml#3865 http://www.secuobs.com/news/comments216092006-wishmaster.shtml#3865 ESRT @Raykoid666 - null-free windows x86 bindshell shellcode xp to windows 7 http://www.secuobs.com/twitter/news/39882.shtml http://www.secuobs.com/news/comments216092006-wishmaster.shtml#3833 http://www.secuobs.com/news/comments216092006-wishmaster.shtml#3833 ESRT @Raykoid666 - Offensive-security added shellcode section in there exploit db http://www.secuobs.com/twitter/news/39883.shtml http://www.secuobs.com/news/comments116092006-wishmaster.shtml#3832 http://www.secuobs.com/news/comments116092006-wishmaster.shtml#3832 Video : ESRT @xanda @threatpost - Exploitation 102: Mitigations and Shellcode http://www.secuobs.com/twitter/news/39677.shtml http://www.secuobs.com/news/comments116092006-wishmaster.shtml#3812 http://www.secuobs.com/news/comments116092006-wishmaster.shtml#3812 Implementing a Win32 Kernel Shellcode http://www.secuobs.com/revue/news/158001.shtml http://www.secuobs.com/news/comments116092006-wishmaster.shtml#3640 http://www.secuobs.com/news/comments116092006-wishmaster.shtml#3640 Unexported SSDT functions finding method http://www.secuobs.com/revue/news/156445.shtml http://www.secuobs.com/news/comments116092006-wishmaster.shtml#3590 http://www.secuobs.com/news/comments116092006-wishmaster.shtml#3590 14 bytes small win32 XP SP3 FR sleep shellcode http://www.secuobs.com/revue/news/136809.shtml http://www.secuobs.com/news/comments116092006-wishmaster.shtml#2968 http://www.secuobs.com/news/comments116092006-wishmaster.shtml#2968 41 bytes small notepadexe shell for Microsoft Windows XP SP2 FR http://www.secuobs.com/revue/news/135834.shtml http://www.secuobs.com/news/comments116092006-wishmaster.shtml#2934 http://www.secuobs.com/news/comments116092006-wishmaster.shtml#2934 Hydra,advanced x86 polymorphic shellcode engine DEFCON 17 https://www.defcon.org/images/defcon-17/dc-17-presentations/defcon-17-pratap_prabhu-yingbo_song-smashing_the_stack.pdf http://www.secuobs.com/news/comments116092006-wishmaster.shtml#2850 http://www.secuobs.com/news/comments116092006-wishmaster.shtml#2850 ESRT @packet_storm - Polymorphic Shellcode To Disable eth0 http://www.secuobs.com/twitter/news/17018.shtml http://www.secuobs.com/news/comments116092006-wishmaster.shtml#2800 http://www.secuobs.com/news/comments116092006-wishmaster.shtml#2800 ESRT @packet_storm killall5 Polymorphic Shellcode For Linux x86 http://www.secuobs.com/twitter/news/15728.shtml http://www.secuobs.com/news/comments116092006-wishmaster.shtml#2719 http://www.secuobs.com/news/comments116092006-wishmaster.shtml#2719 ESRT @mubix @thierryzoller @pusscat Windows 7 Shellcode kernel32 base address http://www.secuobs.com/twitter/news/14680.shtml http://www.secuobs.com/news/comments116092006-wishmaster.shtml#2625 http://www.secuobs.com/news/comments116092006-wishmaster.shtml#2625 ESRT @antic0de @stephenfewer Calling API Functions, Win32 and Win64 shellcode fun http://www.secuobs.com/twitter/news/14698.shtml http://www.secuobs.com/news/comments116092006-wishmaster.shtml#2624 http://www.secuobs.com/news/comments116092006-wishmaster.shtml#2624 ESRT @lennyzeltser Convert shellcode strings to x86 assembly tool http://www.secuobs.com/twitter/news/8412.shtml http://www.secuobs.com/news/comments16092006-wishmaster.shtml#2342 http://www.secuobs.com/news/comments16092006-wishmaster.shtml#2342 ESRT @packet_storm - Windows XP-SP3 Beep And Exit Process Shellcode http://www.secuobs.com/twitter/news/6121.shtml http://www.secuobs.com/news/comments16092006-wishmaster.shtml#2170 http://www.secuobs.com/news/comments16092006-wishmaster.shtml#2170 ESRT @SteveGoldsby Shellcode to get Kernel32 base address on all Windows versions http://www.secuobs.com/twitter/news/5963.shtml http://www.secuobs.com/news/comments16092006-wishmaster.shtml#2163 http://www.secuobs.com/news/comments16092006-wishmaster.shtml#2163 Vidéo : Building a VNC Backdoor from Scratch http://www.secuobs.com/revue/news/115379.shtml http://www.secuobs.com/news/comments16092006-wishmaster.shtml#2160 http://www.secuobs.com/news/comments16092006-wishmaster.shtml#2160 MessageBox Shellcode http://www.secuobs.com/revue/news/115290.shtml http://www.secuobs.com/news/comments16092006-wishmaster.shtml#2157 http://www.secuobs.com/news/comments16092006-wishmaster.shtml#2157 Faire ses shellcodes sous windows http://www.secuobs.com/revue/news/112693.shtml http://www.secuobs.com/news/comments16092006-wishmaster.shtml#2057 http://www.secuobs.com/news/comments16092006-wishmaster.shtml#2057 Infeasibility of Modeling Polymorphic Shellcodehttp://www.secuobs.com/revue/news/88204.shtml http://www.secuobs.com/news/comments16092006-wishmaster.shtml#1202 http://www.secuobs.com/news/comments16092006-wishmaster.shtml#1202 Whitepaper WiShMaster - WIndows SHellcode MASTERy http://blackhat.com/html/bh-europe-09/bh-eu-09-archives.html http://www.secuobs.com/news/comments16092006-wishmaster.shtml#1117 http://www.secuobs.com/news/comments16092006-wishmaster.shtml#1117 How to analyze shellcode? http://www.secuobs.com/revue/news/73386.shtml http://www.secuobs.com/news/comments16092006-wishmaster.shtml#817 http://www.secuobs.com/news/comments16092006-wishmaster.shtml#817 Who redirected us to the shellcode? http://www.secuobs.com/revue/news/69776.shtml http://www.secuobs.com/news/comments16092006-wishmaster.shtml#707 http://www.secuobs.com/news/comments16092006-wishmaster.shtml#707 Antivirus Firewall Software Leak Test http://www.secuobs.com/revue/news/69708.shtml http://www.secuobs.com/news/comments16092006-wishmaster.shtml#702 http://www.secuobs.com/news/comments16092006-wishmaster.shtml#702